Use Case Builder Forensics and Malware Analysis

Use Case Builder markdown

Details

IDincident_usecasebuilderforensicsandmalwareanalysis
CLI Nameusecasebuilderforensicsandmalwareanalysis
Typemarkdown
Version-1
RequiredNo
Read OnlyNo
Use as KPINo
SearchableNo

Associated Incident Types

{
    "associatedToAll": false,
    "associatedTypes": [
        "Use Case Builder"
    ],
    "caseInsensitive": true,
    "cliName": "usecasebuilderforensicsandmalwareanalysis",
    "closeForm": false,
    "content": true,
    "editForm": true,
    "group": 0,
    "hidden": false,
    "id": "incident_usecasebuilderforensicsandmalwareanalysis",
    "isReadOnly": false,
    "locked": false,
    "name": "Use Case Builder Forensics and Malware Analysis",
    "neverSetAsRequired": false,
    "openEnded": false,
    "ownerOnly": false,
    "required": false,
    "sla": 0,
    "system": false,
    "threshold": 72,
    "type": "markdown",
    "unmapped": false,
    "unsearchable": true,
    "useAsKpi": false,
    "version": -1,
    "fromVersion": "6.8.0",
    "template": "# Forensics and Malware Analysis\n## Top Use Cases:\n\n- Submit a file and get a report (detonation)\n- Submit a URL and get a report (detonation)\n- Search for past analysis (input being a hash/url).\n- Retrieve a PCAP file\n- Retrieve screenshots taken during analysis.\n\n## Sandbox Integration Example: [Cuckoo Sandbox](https://xsoar.pan.dev/docs/reference/integrations/cuckoo-sandbox)"
}